PT-2006-4426 · Ncp · Ncp Secure Enterprise Client

Publicado 2006-07-13 · Atualizado 2017-07-20 · CVE-2006-3551

Positive Technologies (AI Summary)

CVSS v2.0

1.2

Baixa

Vetor base

AV:L/AC:H/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions NCP Secure Enterprise Client versions 8.30 Build 59 and earlier

Description The issue allows context-dependent attackers to send inbound UDP traffic with source port 67 and destination port 68, and outbound UDP traffic with source port 68 and destination port 67, when the Link Firewall and Personal Firewall are both configured to block all inbound and outbound network traffic.

Recommendations For versions 8.30 Build 59 and earlier, consider reconfiguring the firewall settings to properly block the specified UDP traffic, or apply alternative security measures to restrict inbound and outbound network traffic.

Correção

Identificadores relacionados

CVE-2006-3551

Produtos afetados

Ncp Secure Enterprise Client

Referências · 3

• https://exchange.xforce.ibmcloud.com/vulnerabilities/27484 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-3551 · Nota de Segurança
• http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/047547.html · Nota